CVE-2014-7145
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS...
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.
Exploit likelihood
What each source reports
NVD Score used
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.
- Record
CVE-2014-7145- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.
- Record
CVE-2014-7145- Updated
- 2026-11-02
EUVDEUVD-2014-7022 No score
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.
- Record
EUVD-2014-7022- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pcv5-8q8x-qqfx No score
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS...
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.
- Record
GHSA-pcv5-8q8x-qqfx- Updated
- 2026-11-02
OSVBELL-CVE-2014-7145
CVE-2014-7145 does not affect BellSoft software
- Record
BELL-CVE-2014-7145- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
OSV No score
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.
- Record
CVE-2014-7145- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-7145 No score
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.
- Record
DEBIAN-CVE-2014-7145- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-7145 No score
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other impact by deleting the IPC$ share during resolution of DFS referrals.
- Record
UBUNTU-CVE-2014-7145- Updated
- 2026-11-02
OSVUSN-2395-1 No score
linux vulnerabilities
Nadav Amit reported that the KVM (Kernel Virtual Machine) mishandles noncanonical addresses when emulating instructions that change the rip (Instruction Pointer). A guest user with access to I/O or the MMIO can use this flaw to cause a denial of service (system crash) of the guest. (CVE-2014-3647)
A flaw was discovered with the handling of the invept instruction in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel. An unprivileged guest user could exploit this flaw to cause a denial of service (system crash) on the guest. (CVE-2014-3646)
Lars Bull reported a race condition in the PIT (programmable interrupt timer) emulation in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel. A local guest user with access to PIT i/o ports could exploit this flaw to cause a denial of service (crash) on the host. (CVE-2014-3611)
Lars Bull and Nadav Amit reported a flaw in how KVM (the Kernel Virtual Machine) handles noncanonical writes to certain MSR registers. A privileged guest user can exploit this flaw to cause a denial of service (kernel panic) on the host. (CVE-2014-3610)
A bounds check error was discovered in the driver for the Logitech Unifying receivers and devices. A physically proximate attacker could exploit this flaw to to cause a denial of service (invalid kfree) or to execute arbitrary code. (CVE-2014-3182)
Raphael Geissert reported a NULL pointer dereference in the Linux kernel's CIFS client. A remote CIFS server could cause a denial of service (system crash) or possibly have other unspecified impact by deleting IPC$ share during resolution of DFS referrals. (CVE-2014-7145)
- Record
USN-2395-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.16.3-1 | 3.16.3-1 |
linuxDebian:13 |
before 3.16.3-1 | 3.16.3-1 |
linuxDebian:14 |
before 3.16.3-1 | 3.16.3-1 |
kernelRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
Show 73 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
perfRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-docRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
python-perfRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernelRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-develRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
perfRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-docRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
python-perfRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernelRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-bootwrapperRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-develRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-kdumpRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-kdump-develRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
perfRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-docRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
python-perfRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernelRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debug-develRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-develRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-headersRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-toolsRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
perfRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
python-perf-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-docRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
kernel-tools-libs-develRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
python-perfRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 0:3.10.0-123.20.1.el7 | 0:3.10.0-123.20.1.el7 |
linuxUbuntu:14.04:LTS |
before 3.13.0-39.66, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 42 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.64 |
3.13.0-39.66 |
linuxUbuntu:14.04:LTS From an advisory covering 6 CVEs |
before 3.13.0-39.66, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 42 moreShow less3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.64 |
3.13.0-39.66 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-7145 is a high vulnerability (CVSS 7.8) in Linux Kernel, published September 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.72%, the 89th percentile. Fixed in linux 3.16.3-1.
References
ubuntu.com/usn/USN-2394-1
openwall.com/lists/oss-security/2014/09/22/4
github.com/torvalds/linux/commit/18f39e7be0121317550d03e267e3ebd4dbfbb3ce
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3
securityfocus.com/bid/69867
rhn.redhat.com/errata/RHSA-2015-0102.html
Show 39 moreShow less
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=18f39e7be0121317550d03e267e3ebd4dbfbb3ce
nvd.nist.gov/vuln/detail/CVE-2014-7145
docs.bell-sw.com/security/cves/CVE-2014-7145
security-tracker.debian.org/tracker/CVE-2014-7145
access.redhat.com/errata/RHSA-2015:0102
bugzilla.redhat.com/show_bug.cgi?id=1111180
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0102.json
cve.org/CVERecord?id=CVE-2014-4171
ubuntu.com/security/CVE-2014-7145